Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownzzzcms zzzphp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.64%Nov 26, 2024
- High7.1Linux Kernel Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 1.35%Nov 25, 2024
- UnknownZyxel zld Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.32%Nov 25, 2024
- Unknowntychesoftwares product_input_fields_for_woocommerce Path Traversal: '.../...//'Patch nowKEVEPSS 0.76%Nov 25, 2024
- High7.2PaperCut papercut_ng Exposed Dangerous Method or FunctionPatch nowKEVEPSS 1.76%Nov 22, 2024
- Critical9.8Zyxel Multiple Firewalls Path Traversal VulnerabilityPatch nowKEVEPSS 2.93%Nov 21, 2024
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 83.11%Nov 21, 2024
- UnknownMicrosoft Outlook Remote Code Execution VulnerabilityPatch nowKEVEPSS 3.50%Nov 20, 2024
- UnknownIntel hyperscan_library Insufficient Control Flow ManagementPatch nowKEVEPSS 0.17%Nov 20, 2024
- Unknownrevive-adserver revive_adserver URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 69.56%Nov 20, 2024
- UnknownOracle Coherence Product of Oracle Fusion Middleware Core Components IIOP/T3 VulnerabilityPatch nowKEVEPSS 74.75%Nov 20, 2024
- UnknownMicrosoft Jet Database Engine VBA Shell VulnerabilityPatch nowKEVEPSS 3.73%Nov 20, 2024
- Medium6.3Apple Multiple Products Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 22.59%Nov 19, 2024
- High8.8Apple Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 10.16%Nov 19, 2024
- UnknownWindows CSC Service Elevation of Privilege VulnerabilityPatch nowKEVEPSS 9.38%Nov 19, 2024
- UnknownMicrosoft Windows Improper Privilege ManagementPatch nowKEVEPSS 1.21%Nov 19, 2024
- Medium6.9Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityPatch nowKEVEPSS 94.82%Nov 18, 2024
- High7.5Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization VulnerabilityPatch nowKEVEPSS 1.72%Nov 18, 2024
- Critical9.3Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.86%Nov 18, 2024
- Medium5.3MDaemon Email Server Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 31.36%Nov 15, 2024
- UnknownFortinet forticlient Cleartext Storage of Sensitive InformationPatch nowKEVEPSS 0.14%Nov 15, 2024
- Critical9.8GeoVision Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 28.39%Nov 14, 2024
- Unknownreally-simple-plugins really_simple_security Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 82.22%Nov 14, 2024
- UnknownChartify WordPress Chart Plugin For WordPress Local File Inclusion VulnerabilityPatch nowKEVEPSS 4.81%Nov 14, 2024
- UnknownD-Link dns-320_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 96.28%Nov 13, 2024